Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9199371/36FEE7EA38BD11EC9DD4EB50C4F9AE02/5FC6CEFC38BF11EC9BA51E52C4F9AE02.roa
File:                     5FC6CEFC38BF11EC9BA51E52C4F9AE02.roa (raw, json)
Hash identifier:          xMR/YnguGQ65JG/6TJojLxvfAgA6ZYA0z3zusRzziKw=
Subject key identifier:   DA:A3:A2:C5:02:42:D2:18:16:52:5B:2B:0D:25:E7:8E:4A:EC:18:67
Certificate issuer:       /CN=A9199371/serialNumber=32F8900D3856BE43A72D6C7F93E904B5B83CC34D
Certificate serial:       03BE
Authority key identifier: 32:F8:90:0D:38:56:BE:43:A7:2D:6C:7F:93:E9:04:B5:B8:3C:C3:4D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MviQDThWvkOnLWx_k-kEtbg8w00.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9199371/36FEE7EA38BD11EC9DD4EB50C4F9AE02/5FC6CEFC38BF11EC9BA51E52C4F9AE02.roa
Signing time:             Sat 23 Mar 2024 02:14:38 +0000
ROA not before:           Sat 23 Mar 2024 02:14:38 +0000
ROA not after:            Wed 28 May 2025 00:00:00 +0000
asID:                     135123
IP address blocks:        103.210.4.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9199371/36FEE7EA38BD11EC9DD4EB50C4F9AE02/MviQDThWvkOnLWx_k-kEtbg8w00.crl
                          rsync://rpki.apnic.net/member_repository/A9199371/36FEE7EA38BD11EC9DD4EB50C4F9AE02/MviQDThWvkOnLWx_k-kEtbg8w00.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MviQDThWvkOnLWx_k-kEtbg8w00.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 958 (0x3be)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9199371/serialNumber=32F8900D3856BE43A72D6C7F93E904B5B83CC34D
        Validity
            Not Before: Mar 23 02:14:38 2024 GMT
            Not After : May 28 00:00:00 2025 GMT
        Subject: CN=65fe3b0e-4474
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:ff:94:8a:d0:c1:ea:ec:60:0a:c8:6b:16:b6:
                    ce:3a:88:d7:6e:2a:e0:b0:9a:f3:dd:79:26:fd:4f:
                    e6:0b:14:a2:65:89:4e:14:85:56:95:2b:14:60:1f:
                    b8:3c:2e:75:a4:2e:27:b2:b7:32:42:9d:46:f1:9e:
                    4c:1c:4a:4b:ed:9e:92:fa:97:e4:cd:25:f8:72:63:
                    5f:2e:1f:16:c6:e6:1c:77:68:91:ff:8b:5e:e2:0e:
                    ba:76:dc:93:ae:ec:b9:23:63:6d:55:26:72:a0:44:
                    ba:76:cc:c9:4e:4d:30:40:43:16:2a:62:ee:a4:5b:
                    73:57:b9:ba:b9:2b:a3:6c:89:27:b9:9e:fb:f0:cc:
                    04:c7:2d:8d:6e:e3:3f:c9:4b:a6:90:de:14:1b:23:
                    3f:9c:52:81:af:88:19:52:67:a3:40:0b:b3:26:bb:
                    ad:4e:28:98:1c:26:85:ec:6a:2a:bb:1f:49:8f:92:
                    e8:a9:89:1f:2a:00:92:ae:fa:c9:2a:ec:f4:d3:01:
                    82:8c:25:8d:3a:ac:8f:0a:5f:f7:e1:a1:1b:4b:be:
                    ea:aa:44:98:84:53:0f:c8:70:64:ab:ff:0a:0c:64:
                    30:36:88:33:4c:d7:03:e8:2d:24:6d:71:81:63:54:
                    95:c3:ed:71:f4:92:4b:d0:c6:94:05:a1:2a:9b:5a:
                    7a:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:A3:A2:C5:02:42:D2:18:16:52:5B:2B:0D:25:E7:8E:4A:EC:18:67
            X509v3 Authority Key Identifier:
                keyid:32:F8:90:0D:38:56:BE:43:A7:2D:6C:7F:93:E9:04:B5:B8:3C:C3:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9199371/36FEE7EA38BD11EC9DD4EB50C4F9AE02/MviQDThWvkOnLWx_k-kEtbg8w00.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MviQDThWvkOnLWx_k-kEtbg8w00.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199371/36FEE7EA38BD11EC9DD4EB50C4F9AE02/5FC6CEFC38BF11EC9BA51E52C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.210.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2b:d2:eb:9a:36:5f:e3:e9:91:10:3c:37:95:27:2a:cf:9e:64:
         26:31:f8:7c:2e:62:33:52:41:24:d0:af:b3:22:99:6e:d6:73:
         86:24:ea:50:cd:76:00:47:8c:d6:90:8a:4f:88:5e:26:c1:38:
         dd:e3:73:78:8c:42:b8:4f:cc:2f:49:b8:9e:30:6f:93:8b:12:
         31:7c:7a:40:6a:4e:00:45:69:3c:b1:ea:f8:0c:f6:6c:5f:d7:
         0f:07:9b:43:52:2e:ed:7b:7c:58:23:5f:8c:66:18:a9:4e:1d:
         94:6b:3a:35:d4:56:70:bb:31:78:23:90:0e:4b:56:b0:70:a0:
         ea:7b:73:66:51:ff:7f:bf:0f:69:bb:d9:0b:a7:3a:8a:14:0e:
         d4:5b:5e:2d:bd:f5:2c:14:6a:42:e9:a2:be:1b:72:5a:db:32:
         bd:58:bd:25:0f:fe:0a:f9:f9:89:04:d0:43:a9:49:d7:84:2c:
         a6:d5:9c:bc:9a:41:c2:2c:c8:39:e7:c6:f9:a4:ce:0c:50:42:
         b7:41:f6:e6:9a:96:e9:74:a4:5c:dd:7f:f2:28:60:f9:27:29:
         2a:ca:13:8f:79:08:61:56:dc:96:8e:c8:a3:d8:e5:0a:da:ca:
         03:80:70:8b:c3:c3:7d:49:be:3c:e8:2c:fc:1f:76:09:c6:2b:
         9e:bb:0d:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 01:27:26 2024 by rpki-client on console-ams.rpki-client.org